Verify Witness Conditional with airSlate SignNow

Verify witness formula

hey we have a great video for you today this is going to be the first of many that we're doing about our open source project witness and archivist you know and the reason we're doing it is because ensuring the Integrity of the software supply chain is essential for building and deploying to care software tampering with build materials or the build process itself can introduce malicious code and result in compromise software in this video we will show you how to use the open source tool witness to generate and verify attestations these attestations can be used to create a verifiable record of the steps taken to build the software this will help prevent tampering and ensure the Integrity of your software supply chain so we're going to go over a few things here the first thing we're going to talk about is the overview overview of the witness tool and how it can be used to generate and verify at the stations and then next we're going to go a step-by-step guide on how to create and verify these attestations using public and private key key pairs then finally we'll talk about how this may look in your Enterprise or your your CI open source CI project and things that you can do with other products that we have that can help secure and automate um the provenance generation of your software supply chain so the software supply chain is the process of creating and delivering software from the initial development stages all the way to the end user ensuring the Integrity of the process is crucial for building and deploying secure software any tampering with the build materials or the build process itself can introduce malicious code and result in compromised software one way to prevent tampering and verify the Integrity of the software supply chain is by generating attestations about that build process these attestations provide a verifiable record of the steps taken to build the software including the materials used the tests run and the commands run during the build this allows us to ensure that the software is built according to the intended specifications and it has not been tampered with the witness tool is an open source tool that can be used to generate and verify attestations about the software build process this allows us to create a verifiable record of the steps taken to build that software so the first thing you want to do is head over to our GitHub organization that's testify SEC and go to the witness examples examples repository go ahead and clone this this is going to make following along a lot easier we've all all the policy files and Rigo files and shell script we hit we have them all here so so make a lot easier the next thing you're going to want to do after that is actually go ahead and go to our releases pages on our witness repository you can go...